1. Who we are
BantaScore ("BantaScore", "we", "us") operates bantascore.com and the BantaScore app at app.bantascore.com. We are the data controller for the personal data described here. We handle it in line with the Nigeria Data Protection Act 2023 (NDPA) and other applicable law.
For any privacy question or request, contact us at support@bantascore.com.
2. What we collect
Information you give us
- Account details: your email address and password. We store only a salted hash of your password, never the password itself.
- Display name: the name shown on leaderboards.
- Phone number: only if you choose to add one.
- Payout details: if you add a payout account, its bank, account name and account number. The account number is encrypted before it is stored.
- Pots and predictions: pots you create, the predictions you make, when you make or edit them, and changes you make to your pots.
- Messages: anything you send us, for example a support request or a dispute about a result.
Information we collect automatically
- Location at signup: your country, worked out from the network you sign up from. It decides your payout currency and which pots you can join. We do not track your precise location.
- Technical data: IP address, browser and device type, and logs of requests and errors. We use these to keep the Service secure and working.
Information from others
- Payment information: from Paystack, the status and reference of payments, payouts and refunds, and the account name your bank confirms for a payout account. Card details go straight to Paystack and we never see them.
3. How we use it, and why
The NDPA requires a lawful basis for each use of personal data. Ours are:
| What we do | Lawful basis |
|---|---|
| Create and secure your account, and verify your email | Contract |
| Run pots: take predictions, score and rank them, and show leaderboards | Contract |
| Collect pot funding, and pay prizes and refunds | Contract |
| Send service messages, such as sign-in codes, payout updates and changes to our terms | Contract |
| Keep financial records and an audit trail of money movements | Legal obligation |
| Prevent fraud, multiple accounts and abuse, and enforce our Terms | Legitimate interests |
| Fix errors and improve the Service | Legitimate interests |
| Respond to lawful requests from authorities | Legal obligation |
We do not use your data for advertising, and we do not make automated decisions about you beyond scoring predictions under the published rules.
4. What other users can see
- On a pot's leaderboard: your display name, your prediction, and after the match your points, rank and any prize you won. Anyone who can view the pot can see these.
- Whether a winner's prize has been paid is shown only to the pot's potter.
- Private pots can be viewed only through their share link or by people who have joined them.
- We never show other users your email, phone number or bank details.
Choose a display name you are comfortable with others seeing. It does not need to be your real name.
6. International transfers
Some of our providers process data outside Nigeria, for example on servers in the European Union or the United States. When this happens, we rely on the safeguards the NDPA allows, such as contractual protections and recipients subject to adequate data protection laws.
7. How long we keep it
- Account data is kept while your account is open.
- Sign-in sessions expire after 7 days, and one-time codes after 10 minutes.
- Financial records are kept for as long as financial, tax and anti-money-laundering laws require, even after your account is closed. These include pots, payments, payouts, refunds, the payout account details used, and the audit trail. Removing a payout account stops it being used, but it stays in the records of past payouts.
- Technical logs and error reports are kept for a limited period and then deleted.
When we no longer need data, we delete or anonymise it.
8. How we protect it
Bank account numbers are encrypted, and only the last four digits are shown. Passwords are stored as salted hashes, and all connections use HTTPS. Access to back-office tools is limited by role, and staff actions on money and accounts are logged. No system is perfectly secure. If a breach puts your rights at risk, we will tell you and the Nigeria Data Protection Commission as the law requires.
9. Your rights
Under the NDPA you have the right to:
- access the personal data we hold about you and get a copy;
- have inaccurate data corrected;
- have your data deleted, except where we must keep it by law (see section 7);
- restrict or object to our use of your data, including uses based on legitimate interests;
- receive your data in a portable format;
- withdraw consent where we rely on it, without affecting earlier processing.
You can update your display name, phone number and payout accounts in your profile. For anything else, email support@bantascore.com. We may need to verify your identity first. We aim to respond within 30 days.
If you are unhappy with how we handle your data, you can complain to the Nigeria Data Protection Commission. We would appreciate the chance to resolve it with you first.
10. Age limits
BantaScore is only for people aged 16 or older. Users aged 16 or 17 must have a parent or guardian's permission, and that adult may contact us to exercise the young person's rights. We do not knowingly collect data from anyone under 16. If we learn that we have, we will close the account and delete the data, except for any record the law requires us to keep.
12. Changes to this policy
We may update this policy from time to time and will show the date of the latest version at the top. If a change materially affects how we use your data, we will tell you in the app or by email before it takes effect.
13. Contact us
Privacy questions or requests: support@bantascore.com.